FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43411)

FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/dialplans/dialplans.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the appuuid...

PT-2019-15832

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the app uuid parameter in the "app/dialplans/dialplans.php" endpoint. Recommendations For FusionPBX version...